networking - Snort - Error while running -
running snort (in packet dump mode) command sudo snort -c snort.conf -a console -i eth0
following problem occurred:
--== initializing snort ==-- initializing output plugins! snort bpf option: snort.conf pcap daq configured passive. daq version not support reload. acquiring network traffic "eth0". error: can't set daq bpf filter 'snort.conf' (pcap_daq_set_filter: pcap_compile: syntax error)! fatal error, quitting..
can please suggest solution?
you're using wrong option load configuration, should lower case '-c'.
sudo snort -c snort.conf -a console -i eth0
also, can test configuration '-t' before running it:
sudo snort -t -c snort.conf
Comments
Post a Comment